List of attributes of expressions

Attribute	Type	Description
"expr"	paramParams	Expression body
"ex_type"	paramInt	Expression type 0 - Unknown 1 - Vendor name 2 - Product name 3 - File hash 4 - File name 5 - File path 6 - Product version 7 - File version 8 - Linked 9 - And 10 - Or 11 - Not 12 - Media 13 - Certificate
"l_expr"	paramParams	Left expression
"r_expr"	paramParams	Right expression
"certificate"	paramParams	Certificate information: "CertSerial" - Serial number (paramBinary) "CertThumbprint" - Serial thumbprint (paramBinary) "CertIssuer" - Issuer (paramString) "CertIssuerShort" - Short issuer (paramString) "CertSubject" - Subject (paramString) "CertSubjectShort" - Short subject (paramString) "CertValidFrom" - Valid from (paramDateTime) "CertValidTo" - Valid to (paramDateTime) "CertPublicKey" - Public key (paramBinary)
"str"	paramString	String data
"str2"	paramString	Additional string data
"str_op"	paramInt	String compare operation: 0 - Equal 1 - Not equal 2 - Like 3 - Contains 4 - Starts with 5 - Ends with
"ver_major"	paramInt	Major version
"ver_minor"	paramInt	Minor version
"ver_build"	paramInt	Build version
"ver_revision"	paramInt	Revision version
"ver_suffix"	paramString	Version suffix
"ver_raw"	paramString	Version raw
"ver_op"	paramInt	Version compare operation: 0 - Equal 1 - Not equal 2 - Like 3 - Contains 4 - Starts with 5 - Ends with 6 - Greater 7 - Greater or equal 8 - Less 9 - Less or equal
"media_type"	paramInt	Media type: 0 - Any 1 - Removable drive